9

Dockerfile

@@ -0,0 +1,63 @@
+FROM debian
+
+# hook into docker BuildKit --platform support
+# see https://docs.docker.com/engine/reference/builder/#automatic-platform-args-in-the-global-scope
+ARG TARGETOS
+ARG TARGETARCH
+ARG TARGETVARIANT
+
+RUN --mount=target=/build,source=build /build/install-packages
+
+ARG BOX64_PACKAGE=box64
+RUN --mount=target=/build,source=build BOX64_PACKAGE=$BOX64_PACKAGE /build/setup-arm64
+
+EXPOSE 19132/udp
+
+VOLUME ["/data"]
+
+WORKDIR /data
+
+ENTRYPOINT ["/usr/local/bin/entrypoint-demoter", "--match", "/data", "--debug", "--stdin-on-term", "stop", "/opt/bedrock-entry.sh"]
+
+ARG APPS_REV=1
+ARG GITHUB_BASEURL=https://github.com
+
+ARG EASY_ADD_VERSION=0.8.2
+ADD ${GITHUB_BASEURL}/itzg/easy-add/releases/download/${EASY_ADD_VERSION}/easy-add_${TARGETOS}_${TARGETARCH}${TARGETVARIANT} /usr/bin/easy-add
+RUN chmod +x /usr/bin/easy-add
+
+ARG ENTRYPOINT_DEMOTER_VERSION=0.4.2
+RUN easy-add --var version=${ENTRYPOINT_DEMOTER_VERSION} --var app=entrypoint-demoter --file {{.app}} --from ${GITHUB_BASEURL}/itzg/{{.app}}/releases/download/v{{.version}}/{{.app}}_{{.version}}_linux_${TARGETARCH}.tar.gz
+
+ARG SET_PROPERTY_VERSION=0.1.1
+RUN easy-add --var version=${SET_PROPERTY_VERSION} --var app=set-property --file {{.app}} --from ${GITHUB_BASEURL}/itzg/{{.app}}/releases/download/{{.version}}/{{.app}}_{{.version}}_linux_${TARGETARCH}.tar.gz
+
+ARG RESTIFY_VERSION=1.7.2
+RUN easy-add --var os=${TARGETOS} --var arch=${TARGETARCH}${TARGETVARIANT} \
+  --var version=${RESTIFY_VERSION} --var app=restify --file {{.app}} \
+  --from ${GITHUB_BASEURL}/itzg/{{.app}}/releases/download/{{.version}}/{{.app}}_{{.version}}_{{.os}}_{{.arch}}.tar.gz
+
+ARG MC_MONITOR_VERSION=0.12.6
+RUN easy-add --var os=${TARGETOS} --var arch=${TARGETARCH}${TARGETVARIANT} \
+  --var version=${MC_MONITOR_VERSION} --var app=mc-monitor --file {{.app}} \
+  --from ${GITHUB_BASEURL}/itzg/{{.app}}/releases/download/{{.version}}/{{.app}}_{{.version}}_{{.os}}_{{.arch}}.tar.gz
+
+ARG MC_SERVER_RUNNER_VERSION=1.12.1
+RUN easy-add --var os=${TARGETOS} --var arch=${TARGETARCH}${TARGETVARIANT} \
+  --var version=${MC_SERVER_RUNNER_VERSION} --var app=mc-server-runner --file {{.app}} \
+  --from ${GITHUB_BASEURL}/itzg/{{.app}}/releases/download/{{.version}}/{{.app}}_{{.version}}_{{.os}}_{{.arch}}.tar.gz
+
+COPY *.sh /opt/
+
+COPY property-definitions.json /etc/bds-property-definitions.json
+COPY bin/* /usr/local/bin/
+
+# Available versions listed at
+# https://minecraft.wiki/w/Bedrock_Edition_1.11.0
+# https://minecraft.wiki/w/Bedrock_Edition_1.12.0
+# https://minecraft.wiki/w/Bedrock_Edition_1.13.0
+# https://minecraft.wiki/w/Bedrock_Edition_1.14.0
+ENV VERSION=LATEST \
+    SERVER_PORT=19132
+
+HEALTHCHECK --start-period=1m CMD /usr/local/bin/mc-monitor status-bedrock --host 127.0.0.1 --port $SERVER_PORT

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2019 Geoff Bourne
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

bedrock-entry.sh

@@ -0,0 +1,214 @@
+#!/bin/bash
+
+set -eo pipefail
+
+: "${TMP_DIR:=/tmp}"
+: "${PREVIEW:=false}"
+
+function isTrue() {
+  [[ "${1,,}" =~ ^(true|on|1)$ ]] && return 0
+  return 1
+}
+
+function lookupVersion() {
+  platform=${1:?Missing required platform indicator}
+
+  # shellcheck disable=SC2034
+  for i in {1..3}; do
+    DOWNLOAD_URL=$(restify --user-agent=itzg/minecraft-bedrock-server --headers "accept-language:*" --attribute=data-platform="${platform}" "${downloadPage}" 2> restify.err | jq -r '.[0].href' || echo '')
+    [[ -n "${DOWNLOAD_URL}" ]] && break
+    sleep 1
+  done
+  if [[ -z ${DOWNLOAD_URL} ]]; then
+    DOWNLOAD_URL=$(curl -s https://mc-bds-helper.vercel.app/api/latest)
+  fi
+
+  # shellcheck disable=SC2012
+  if [[ ${DOWNLOAD_URL} =~ http.*/.*-(.*)\.zip ]]; then
+    VERSION=${BASH_REMATCH[1]}
+  elif [[ $(ls -rv bedrock_server-* 2> /dev/null|head -1) =~ bedrock_server-(.*) ]]; then
+    VERSION=${BASH_REMATCH[1]}
+    echo "WARN Minecraft download page failed, so using existing download of $VERSION"
+    cat restify.err
+  else
+    if [[ -f restify.err ]]; then
+      echo "Failed to extract download URL '${DOWNLOAD_URL}' from ${downloadPage}"
+      cat restify.err
+      rm restify.err
+    else
+      echo "Failed to lookup download URL: ${DOWNLOAD_URL}"
+    fi
+    exit 2
+  fi
+  rm -f restify.err
+}
+
+if [[ ${DEBUG^^} == TRUE ]]; then
+  set -x
+  curlArgs=(-v)
+  echo "DEBUG: running as $(id -a) with $(ls -ld /data)"
+  echo "       current directory is $(pwd)"
+fi
+
+export HOME=/data
+
+downloadPage=https://www.minecraft.net/en-us/download/server/bedrock
+
+if [[ ${EULA^^} != TRUE ]]; then
+  echo
+  echo "EULA must be set to TRUE to indicate agreement with the Minecraft End User License"
+  echo "See https://minecraft.net/terms"
+  echo
+  echo "Current value is '${EULA}'"
+  echo
+  exit 1
+fi
+
+case ${VERSION^^} in
+  1.12)
+    VERSION=1.12.0.28
+    ;;
+  1.13)
+    VERSION=1.13.0.34
+    ;;
+  1.14)
+    VERSION=1.14.60.5
+    ;;
+  1.16)
+    VERSION=1.16.20.03
+    ;;
+  1.17)
+    VERSION=1.17.41.01
+    ;;
+  1.17.41)
+    VERSION=1.17.41.01
+    ;;
+  1.18|PREVIOUS)
+    VERSION=1.18.33.02
+    ;;
+  PREVIEW)
+    echo "Looking up latest preview version..."
+    lookupVersion serverBedrockPreviewLinux
+    ;;
+  LATEST)
+    echo "Looking up latest version..."
+    lookupVersion serverBedrockLinux
+    ;;
+  *)
+    # use the given version exactly
+    ;;
+esac
+
+if [[ ! -f "bedrock_server-${VERSION}" ]]; then
+
+  if [[ -z "${DOWNLOAD_URL}" ]]; then
+    binPath=bin-linux
+    isTrue "${PREVIEW}" && binPath+="-preview"
+    DOWNLOAD_URL="https://minecraft.azureedge.net/${binPath}/bedrock-server-${VERSION}.zip"
+  fi
+
+  [[ $TMP_DIR != /tmp ]] && mkdir -p "$TMP_DIR"
+  TMP_ZIP="$TMP_DIR/$(basename "${DOWNLOAD_URL}")"
+
+  echo "Downloading Bedrock server version ${VERSION} ..."
+  if ! curl "${curlArgs[@]}" -o "${TMP_ZIP}" -fsSL "${DOWNLOAD_URL}"; then
+    echo "ERROR failed to download from ${DOWNLOAD_URL}"
+    echo "      Double check that the given VERSION is valid"
+    exit 2
+  fi
+
+  # remove only binaries and some docs, to allow for an upgrade of those
+  rm -rf -- bedrock_server bedrock_server-* *.so release-notes.txt bedrock_server_how_to.html valid_known_packs.json premium_cache 2> /dev/null
+
+  bkupDir=backup-pre-${VERSION}
+  # fixup any previous interrupted upgrades
+  rm -rf "${bkupDir}"
+  for d in behavior_packs definitions minecraftpe resource_packs structures treatments world_templates; do
+    if [[ -d $d && -n "$(ls $d)" ]]; then
+      mkdir -p "${bkupDir}/$d"
+      echo "Backing up $d into $bkupDir"
+      if [[ "$d" == "resource_packs" ]]; then
+        mv $d/{chemistry,vanilla} "${bkupDir}/"
+        [[ -n "$(ls $d)" ]] && cp -a $d/* "${bkupDir}/"
+      else
+        mv $d/* "${bkupDir}/"
+      fi
+    fi
+  done
+
+  # remove old package backups, but keep PACKAGE_BACKUP_KEEP
+  if (( ${PACKAGE_BACKUP_KEEP:=2} >= 0 )); then
+    shopt -s nullglob
+    # shellcheck disable=SC2012
+    for d in $( ls -td1 backup-pre-* | tail +$(( PACKAGE_BACKUP_KEEP + 1 )) ); do
+      echo "Pruning backup directory: $d"
+      rm -rf "$d"
+    done
+  fi
+
+  # Do not overwrite existing files, which means the cleanup above needs to account for things
+  # that MUST be replaced on upgrade
+  unzip -q -n "${TMP_ZIP}"
+  [[ $TMP_DIR != /tmp ]] && rm -rf "$TMP_DIR"
+
+  chmod +x bedrock_server
+  mv bedrock_server "bedrock_server-${VERSION}"
+fi
+
+if [[ -n "$OPS" || -n "$MEMBERS" || -n "$VISITORS" ]]; then
+  echo "Updating permissions"
+  jq -n --arg ops "$OPS" --arg members "$MEMBERS" --arg visitors "$VISITORS" '[
+  [$ops      | split(",") | map({permission: "operator", xuid:.})],
+  [$members  | split(",") | map({permission: "member", xuid:.})],
+  [$visitors | split(",") | map({permission: "visitor", xuid:.})]
+  ]| flatten' > permissions.json
+fi
+
+if [[ -n "$ALLOW_LIST_USERS" || -n "$WHITE_LIST_USERS" ]]; then
+  allowListUsers=${ALLOW_LIST_USERS:-$WHITE_LIST_USERS}
+
+  if [[ "$allowListUsers" ]]; then
+    echo "Setting allow list"
+    if [[ "$allowListUsers" != *":"* ]]; then
+      jq -c -n --arg users "$allowListUsers" '$users | split(",") | map({"ignoresPlayerLimit":false,"name": .})' > "allowlist.json"
+    else
+      jq -c -n --arg users "$allowListUsers" '$users | split(",") | map(split(":") | {"ignoresPlayerLimit":false,"name": .[0], "xuid": .[1]})' > "allowlist.json"
+    fi
+    # activate server property to enable list usage
+    ALLOW_LIST=true
+  else
+    ALLOW_LIST=false
+    rm -f allowlist.json
+  fi
+fi
+
+# prevent issue with bind mounted server.properties which can not be moved (sed tries to move the file when '-i' is used)
+_SERVER_PROPERTIES=$(sed '/^white-list=.*/d' server.properties) #Removes white-list= line from server.properties
+echo "${_SERVER_PROPERTIES}" > server.properties
+export ALLOW_LIST
+
+# update server.properties with environment settings
+set-property --file server.properties --bulk /etc/bds-property-definitions.json
+
+export LD_LIBRARY_PATH=.
+
+mcServerRunnerArgs=()
+if isTrue "${ENABLE_SSH}"; then
+  mcServerRunnerArgs+=(--remote-console)
+  if ! [[ -v RCON_PASSWORD ]]; then
+    RCON_PASSWORD=$(openssl rand -hex 12)
+    export RCON_PASSWORD
+  fi
+
+  # For ssh access by tools, export the current password.
+  # Use rcon's format to align with Java, as Java uses the rcon password for SSH as well.
+  echo "password=${RCON_PASSWORD}" > "$HOME/.remote-console.env"
+  echo "password: \"${RCON_PASSWORD}\"" > "$HOME/.remote-console.yaml"
+fi
+
+echo "Starting Bedrock server..."
+if [[ -f /usr/local/bin/box64 ]] ; then
+    exec mc-server-runner "${mcServerRunnerArgs[@]}" box64 ./"bedrock_server-${VERSION}"
+else
+    exec mc-server-runner "${mcServerRunnerArgs[@]}" ./"bedrock_server-${VERSION}"
+fi

bin/send-command

@@ -0,0 +1,17 @@
+#!/bin/bash
+
+if [[ $* ]]; then
+  # On arm64, the process exe is actually box64 since it in turn wraps the bedrock_server executable
+  if proc=$(find /proc -mindepth 2 -maxdepth 2 -name exe \( -lname '/data/bedrock_server-*' -o -lname /usr/local/bin/box64 \) -printf '%h' -quit); then
+    if [[ $proc ]]; then
+      echo "$@" > "$proc/fd/0"
+    else
+      echo "ERROR: unable to find bedrock server process"
+      exit 2
+    fi
+  else
+    echo "ERROR: failed to search for bedrock server process"
+    exit 2
+  fi
+fi
+

build/install-packages

@@ -0,0 +1,15 @@
+#!/bin/sh
+
+set -eu
+
+apt-get update
+
+DEBIAN_FRONTEND=noninteractive apt-get install -y \
+    curl \
+    openssl \
+    unzip \
+    jq
+
+apt-get clean
+
+rm -rf /var/lib/apt/lists/*

build/setup-arm64

@@ -0,0 +1,17 @@
+#!/bin/sh
+
+set -eu
+
+if [ "$TARGETARCH" = "arm64" ] ; then
+  apt-get update
+  DEBIAN_FRONTEND=noninteractive apt-get install -y debian-keyring
+
+  curl -L https://ryanfortner.github.io/box64-debs/box64.list -o /etc/apt/sources.list.d/box64.list
+  curl -L https://ryanfortner.github.io/box64-debs/KEY.gpg | gpg --dearmor | tee /etc/apt/trusted.gpg.d/box64-debs-archive-keyring.gpg
+
+  apt-get update
+  DEBIAN_FRONTEND=noninteractive apt-get install -y "$BOX64_PACKAGE"
+
+  apt-get clean
+  rm -rf /var/lib/apt/lists/*
+fi

examples/AzureBedrockServer.ps1

@@ -0,0 +1,29 @@
+#you need the Azure cli https://docs.microsoft.com/es-es/cli/azure/
+
+#Login to Azure portal
+az login
+
+#defaults to southcentralus but you can change it to one of the following list locations
+#az account list-locations --query "[].{Region:name}" --out table
+ 
+#create a new resource group "mineResGroup"
+az group create --name mineResGroup --location southcentralus
+
+#put the storage account "acismineacc" into that group
+az storage account create --resource-group mineResGroup --name acismineacc --location southcentralus --sku Standard_LRS --kind StorageV2
+
+#create the volume share "acismineshare" into the storage account
+az storage share create --name acismineshare --account-name acismineacc
+
+#obtain the key from the account "acismineacc" in the resource group "mineResGroup"
+$STORAGE_KEY=$(az storage account keys list --resource-group mineResGroup --account-name acismineacc --query "[0].value" --output tsv)
+echo $STORAGE_KEY
+
+#to actually create the minecraft server int the dns name "minesvrbedrock"
+#the server will be running into server "minesvrbedrock.southcentralus.azurecontainer.io" port "19132", this take some time be patient.
+az container create --resource-group mineResGroup --name minecotainer --image itzg/minecraft-bedrock-server --dns-name-label minesvrbedrock --ports 19132 19133 --protocol udp --restart-policy OnFailure --environment-variables EULA=TRUE --azure-file-volume-account-name acismineacc --azure-file-volume-account-key $STORAGE_KEY --azure-file-volume-share-name acismineshare --azure-file-volume-mount-path /data
+
+#connect to fileshare drive "M" to edit server.properties and everything else
+#you need to restart the container after each change.
+cmd.exe /C "cmdkey /add:`"acismineacc.file.core.windows.net`" /user:`"Azure\acismineacc`" /pass:`"$STORAGE_KEY`""
+New-PSDrive -Name M -PSProvider FileSystem -Root "\\acismineacc.file.core.windows.net\acismineshare" -Persist

examples/docker-compose.host-mount.yml

@@ -0,0 +1,18 @@
+# This example uses a host mounted directory that is created/used relative to this
+# location of this compose file.
+
+version: '3.4'
+
+services:
+  bds:
+    image: itzg/minecraft-bedrock-server
+    environment:
+      EULA: "TRUE"
+      GAMEMODE: survival
+      DIFFICULTY: normal
+    ports:
+      - 19132:19132/udp
+    volumes:
+      - ./data:/data
+    stdin_open: true
+    tty: true

examples/docker-compose.yml

@@ -0,0 +1,18 @@
+version: '3.4'
+
+services:
+  bds:
+    image: itzg/minecraft-bedrock-server
+    environment:
+      EULA: "TRUE"
+      GAMEMODE: survival
+      DIFFICULTY: normal
+    ports:
+      - "19132:19132/udp"
+    volumes:
+      - bds:/data
+    stdin_open: true
+    tty: true
+
+volumes:
+  bds: {}

examples/kubernetes-backup-to-s3.yaml

@@ -0,0 +1,77 @@
+# WARNING: This does not currently account for the potential of the world being saved in 
+#   the middle of a change to the files on disk. The only protection is choosing a time 
+#   for backups that is unlikely to be in use. 
+#
+# NOTE: The save command may be a way around this and is under investigation:
+#   https://minecraft.wiki/w/Commands/save
+
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: backup-to-s3-bedrock
+  labels:
+    role: backup
+data:
+  # https://github.com/flickerfly/docker-backup-to-s3/blob/master/README.md
+  CRON_SCHEDULE: '0 12 * * *'
+  S3_PATH: s3://mybucket/bedrock/
+  AWS_DEFAULT_REGION: us-east-1
+  # Pass this to the S3 command
+  PARAMS: ""
+  PREFIX: bedrock
+  DATA_PATH: /data/
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: backup-to-s3-bedrock
+  labels:
+    role: backup
+data:
+  # https://github.com/flickerfly/docker-backup-to-s3/blob/master/README.md
+  AES_PASSPHRASE: BASE64-ENCODED STRING
+  AWS_ACCESS_KEY_ID: BASE64-ENCODED STRING
+  AWS_SECRET_ACCESS_KEY: BASE64-ENCODED STRING 
+
+---
+# Setup the Deployment of a pod that will do the work.
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: bds-backup
+  labels:
+    role: backup
+    app: bedrock
+spec:
+  replicas: 1
+  revisionHistoryLimit: 2
+  selector:
+    matchLabels:
+      role: backup
+      app: bedrock
+  template:
+    metadata:
+      labels:
+        app: bedrock
+        role: backup
+    spec:
+      containers:
+        - name: backup-to-s3
+          image: jritchie/backup-to-s3
+          args: 
+            - schedule
+          volumeMounts:
+            - name: bds
+              mountPath: /data
+          envFrom:
+            - configMapRef:
+                name: backup-to-s3-bedrock
+            - secretRef:
+                name: backup-to-s3-bedrock
+      volumes:
+        - name: bds
+          persistentVolumeClaim:
+            claimName: bds
+            readOnly: true

examples/kubernetes-restore-to-s3.yaml

@@ -0,0 +1,90 @@
+# IMPORTANT: Be sure to set the VERSION variable in the Job definition 
+#   with the name of the backup file to be restored in S3
+#
+# WARNING: It is best practice to scale down your minecraft deployment
+#   to assure you have no server pods running before a restore. This is 
+#   currenly a manual task.
+
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+   name: minecraft
+---
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: bds
+  namespace: minecraft
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: backup-to-s3-bedrock
+  namespace: minecraft
+  labels:
+    role: backup
+data:
+  # https://github.com/flickerfly/docker-backup-to-s3/blob/master/README.md
+  CRON_SCHEDULE: '0 12 * * *'
+  S3_PATH: s3://mybucket/bedrock
+  AWS_DEFAULT_REGION: us-east-1
+  # Pass this to the S3 command
+  PARAMS: ""
+  PREFIX: bedrock
+  DATA_PATH: /data/
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: backup-to-s3-bedrock
+  namespace: minecraft
+  labels:
+    role: backup
+data:
+  # https://github.com/flickerfly/docker-backup-to-s3/blob/master/README.md
+  AES_PASSPHRASE: BASE64-ENCODED STRING
+  AWS_ACCESS_KEY_ID: BASE64-ENCODED STRING
+  AWS_SECRET_ACCESS_KEY: BASE64-ENCODED STRING
+
+---
+# Setup the jod to create a pod that will do the work.
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: bds-restore
+  namespace: minecraft
+  labels:
+    role: restore
+    app: bedrock
+spec:
+  template:
+    spec:
+      containers:
+        - name: restore-from-s3
+          image: jritchie/backup-to-s3
+          args: 
+            - restore
+          volumeMounts:
+            - name: bds
+              mountPath: /data
+          envFrom:
+            - configMapRef:
+                name: backup-to-s3-bedrock
+            - secretRef:
+                name: backup-to-s3-bedrock
+          env:
+            - name: VERSION
+              value: bedrck-3020-05-28T15:33:49Z-example
+      restartPolicy: Never
+      volumes:
+        - name: bds
+          persistentVolumeClaim:
+            claimName: bds

examples/kubernetes.yml

@@ -0,0 +1,114 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: minecraft-bedrock
+  labels:
+    role: service-config
+    app: bds
+data:
+  # Find more options at https://github.com/itzg/docker-minecraft-bedrock-server#server-properties
+  # Remove # from in front of line if changing from default values.
+  EULA: "TRUE" # Must accept EULA to use this minecraft server
+  #GAMEMODE: "survival" # Options: survival, creative, adventure
+  #DIFFICULTY: "easy" # Options: peaceful, easy, normal, hard
+  #DEFAULT_PLAYER_PERMISSION_LEVEL: "member" # Options: visitor, member, operator
+  #LEVEL_NAME: "my_minecraft_world"
+  #LEVEL_SEED: "33480944"
+  #SERVER_NAME: "my_minecraft_server"
+  #SERVER_PORT: "19132"
+  #LEVEL_TYPE: "DEFAULT" # Options: FLAT, LEGACY, DEFAULT
+  #ALLOW_CHEATS: "false" # Options: true, false
+  #MAX_PLAYERS: "10"
+  #PLAYER_IDLE_TIMEOUT: "30"
+  #TEXTUREPACK_REQUIRED: "false" # Options: true, false
+  #
+  ## Changing these will have a security impact
+  #ONLINE_MODE: "true" # Options: true, false (removes Xbox Live account requirements)
+  #WHITE_LIST: "false" # If enabled, need to provide a whitelist.json by your own means. 
+  #
+  ## Changing these will have a performance impact
+  #VIEW_DISTANCE: "10"
+  #TICK_DISTANCE: "4"
+  #MAX_THREADS: "8"
+---
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: bds
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  labels:
+    app: bds
+  name: bds
+spec:
+  # never more than 1 since BDS is not horizontally scalable
+  replicas: 1
+  serviceName: bds
+  selector:
+    matchLabels:
+      app: bds
+  template:
+    metadata:
+      labels:
+        app: bds
+    spec:
+      containers:
+        - name: main
+          image: itzg/minecraft-bedrock-server
+          imagePullPolicy: Always
+          envFrom:
+            - configMapRef:
+                name: minecraft-bedrock
+          volumeMounts:
+            - mountPath: /data
+              name: data
+          ports:
+            - containerPort: 19132
+              protocol: UDP
+          readinessProbe: &probe
+            exec:
+              command:
+                - mc-monitor
+                - status-bedrock
+                - --host
+                # force health check against IPv4 port
+                - 127.0.0.1
+            initialDelaySeconds: 30
+          livenessProbe: *probe
+          tty: true
+          stdin: true
+  volumeClaimTemplates:
+    - metadata:
+        name: data
+      spec:
+        accessModes:
+          - ReadWriteOnce
+        resources:
+          requests:
+            storage: 1Gi
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: bds
+spec:
+  selector:
+    app: bds
+  ports:
+    - port: 19132
+      protocol: UDP
+  ipFamily: IPv4
+  # Use LoadBalancer if running on a provider that supports that
+#  type: LoadBalancer
+  # or use NodePort on a non-managed system;
+  # however, you'll need to lookup port assigned to the service
+  type: NodePort

property-definitions.json

@@ -0,0 +1,124 @@
+{
+  "server-name": {
+    "env": "SERVER_NAME"
+  },
+  "server-port": {
+    "env": "SERVER_PORT"
+  },
+  "server-portv6": {
+    "env": "SERVER_PORT_V6"
+  },
+  "gamemode": {
+    "env": "GAMEMODE",
+    "allowed": ["survival","creative","adventure"],
+    "mappings": {
+      "0": "survival",
+      "1": "creative",
+      "2": "adventure"
+    }
+  },
+  "force-gamemode": {
+    "env": "FORCE_GAMEMODE",
+    "allowed": ["true","false"]
+  },
+  "difficulty": {
+    "env": "DIFFICULTY",
+    "allowed": ["easy","peaceful","normal","hard"],
+    "mappings": {
+      "0": "peaceful",
+      "1": "easy",
+      "2": "normal",
+      "3": "hard"
+    }
+  },
+  "level-type": {
+    "env": "LEVEL_TYPE",
+    "allowed": ["DEFAULT","FLAT","LEGACY"],
+    "mappings": {
+      "flat": "FLAT",
+      "legacy": "LEGACY",
+      "default": "DEFAULT"
+    }
+  },
+  "allow-cheats": {
+    "env": "ALLOW_CHEATS",
+    "allowed": ["true","false"]
+  },
+  "max-players": {
+    "env": "MAX_PLAYERS"
+  },
+  "online-mode": {
+    "env": "ONLINE_MODE",
+    "allowed": ["true","false"]
+  },
+  "white-list": {
+    "env": "WHITE_LIST",
+    "allowed": ["true","false"]
+  },
+  "allow-list": {
+    "env": "ALLOW_LIST",
+    "allowed": ["true","false"]
+  },
+  "view-distance": {
+    "env": "VIEW_DISTANCE"
+  },
+  "tick-distance": {
+    "env": "TICK_DISTANCE"
+  },
+  "player-idle-timeout": {
+    "env": "PLAYER_IDLE_TIMEOUT"
+  },
+  "max-threads": {
+    "env": "MAX_THREADS"
+  },
+  "compression-threshold": {
+    "env": "COMPRESSION_THRESHOLD"
+  },
+  "level-name": {
+    "env": "LEVEL_NAME"
+  },
+  "level-seed": {
+    "env": "LEVEL_SEED"
+  },
+  "default-player-permission-level": {
+    "env": "DEFAULT_PLAYER_PERMISSION_LEVEL",
+    "allowed": ["visitor","member","operator"]
+  },
+  "texturepack-required": {
+    "env": "TEXTUREPACK_REQUIRED",
+    "allowed": ["true","false"]
+  },
+  "server-authoritative-movement": {
+    "env": "SERVER_AUTHORITATIVE_MOVEMENT",
+    "allowed": ["server-auth","client-auth","server-auth-with-rewind"],
+    "mappings": {
+      "true": "server-auth",
+      "false": "client-auth"
+    }
+  },
+  "server-authoritative-block-breaking": {
+    "env": "SERVER_AUTHORITATIVE_BLOCK_BREAKING",
+    "allowed": ["true", "false"]
+  },
+  "player-movement-score-threshold": {
+    "env": "PLAYER_MOVEMENT_SCORE_THRESHOLD"
+  },
+  "player-movement-distance-threshold": {
+    "env": "PLAYER_MOVEMENT_DISTANCE_THRESHOLD"
+  },
+  "player-movement-duration-threshold-in-ms": {
+    "env": "PLAYER_MOVEMENT_DURATION_THRESHOLD_IN_MS"
+  },
+  "correct-player-movement": {
+    "env": "CORRECT_PLAYER_MOVEMENT",
+    "allowed": ["true","false"]
+  },
+  "emit-server-telemetry": {
+    "env": "EMIT_SERVER_TELEMETRY",
+    "allowed": ["true","false"]
+  },
+  "enable-lan-visibility": {
+    "env": "ENABLE_LAN_VISIBILITY",
+    "allowed": ["true","false"]
+  }
+}